upgrade pinned versions in .github/actions/, and switch to SHA pin for pypa/gh-action-pypi-publish

Author: emilykl

.github/actions/setup-chrome-for-pytest/action.yml

@@ -5,7 +5,7 @@ runs:
   steps:
     - name: Set up Chrome
       id: setup-chrome
-      uses: browser-actions/setup-chrome@4f8e94349a351df0f048634f25fec36c3c91eded  # v2.1.1
+      uses: browser-actions/setup-chrome@48ad923757ca74d66703209fe939badbdf80f2f4 # v2.2.0
       with:
         install-chromedriver: true
     - name: Set BROWSER env var

.github/workflows/test-release.yml

@@ -71,6 +71,6 @@ jobs:
         name: python-package-distributions
         path: dist/
     - name: Publish distribution 📦 to TestPyPI
-      uses: pypa/gh-action-pypi-publish@release/v1
+      uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33  # v1.14.2
       with:
-        repository-url: https://test.pypi.org/legacy/
+        repository-url: https://test.pypi.org/legacy/